Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
File:                     3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier:          uPrqe+3VY4iMsKPq0O6BgXZ3jDOMsF1P9U++HibeByE=
Subject key identifier:   E4:C2:B8:7F:D5:CE:D9:7C:52:6C:F0:8A:E0:C8:C1:56:64:3B:66:EB
Certificate issuer:       /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Certificate serial:       17403D8F65B28999320CDD2DDA7147749A63649B
Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
Signing time:             Wed 18 Feb 2026 11:02:37 +0000
ROA not before:           Wed 18 Feb 2026 10:57:37 +0000
ROA not after:            Wed 17 Feb 2027 11:02:37 +0000
asID:                     138855
IP address blocks:        103.170.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
                          rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:40:3d:8f:65:b2:89:99:32:0c:dd:2d:da:71:47:74:9a:63:64:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
        Validity
            Not Before: Feb 18 10:57:37 2026 GMT
            Not After : Feb 17 11:02:37 2027 GMT
        Subject: CN=E4C2B87FD5CED97C526CF08AE0C8C156643B66EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:31:cc:c5:81:a9:a5:39:67:7a:21:80:d3:
                    26:07:21:9a:4f:d3:3a:a7:8e:05:75:19:ff:12:40:
                    71:f1:28:f0:eb:cb:58:ea:6e:31:38:23:62:b8:7b:
                    f1:b9:70:6d:0f:49:63:44:d1:82:96:a7:76:3a:02:
                    36:14:2d:9e:6b:12:0d:38:e1:a4:12:61:df:d4:91:
                    0c:59:b0:30:f5:f5:86:b5:d9:0e:3c:80:3d:39:a8:
                    23:b9:62:e0:86:73:8e:f7:6b:e6:11:38:28:c3:4c:
                    87:ed:27:79:35:46:68:ec:fe:96:16:91:52:11:e0:
                    1c:53:39:4d:7a:4c:b6:e9:52:6b:06:48:6f:03:89:
                    52:85:06:2c:a5:b9:71:02:e5:1d:9f:ad:b1:71:0f:
                    77:0b:52:36:fb:ce:63:6c:11:5b:a0:a1:55:49:36:
                    10:b9:56:94:94:cb:19:86:b0:12:0f:da:b7:73:67:
                    ce:6e:15:a4:71:68:df:d3:8b:26:2c:d0:b4:95:8b:
                    14:d1:8f:74:35:a4:44:8d:67:66:e9:4c:ed:66:3e:
                    13:ab:99:3c:76:e3:2a:dd:bc:a3:18:08:81:d9:71:
                    2d:75:3a:d6:e0:c3:91:75:bd:73:2f:32:a0:6d:9f:
                    ce:ee:52:38:56:38:95:0c:d3:ff:7b:9c:d3:69:af:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:B8:7F:D5:CE:D9:7C:52:6C:F0:8A:E0:C8:C1:56:64:3B:66:EB
            X509v3 Authority Key Identifier:
                keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:9b:09:e8:a6:05:1e:4c:51:ce:10:ee:fe:59:52:19:15:
         3d:ec:9c:48:0b:7f:5c:01:0c:c6:9a:2f:a7:8a:f2:7b:86:01:
         bf:6a:62:da:9a:b2:81:9d:87:82:a5:e8:70:24:ca:2d:52:b9:
         ad:52:6d:da:75:c8:23:d9:6a:66:ef:19:80:cd:3d:5f:84:c2:
         c3:85:91:ee:f1:75:03:d6:fd:ce:a7:73:be:a6:20:04:77:04:
         e4:cb:0c:47:80:dc:3b:8d:76:44:ad:20:05:88:49:d6:e8:37:
         6d:74:5d:bb:78:39:df:74:1b:d3:1a:05:08:1e:44:62:b3:6f:
         ab:11:73:86:e7:90:fc:35:0c:f3:9a:85:97:9e:70:c3:89:58:
         00:f4:e8:19:ae:00:07:ec:99:08:50:75:d6:04:96:0b:a0:6d:
         a6:6b:4d:70:58:ca:4b:90:41:af:a1:47:65:26:1b:a0:4f:07:
         c5:62:75:b0:70:64:27:6c:18:01:e8:a7:b1:4c:d1:86:e8:de:
         ee:44:9b:06:f1:7b:80:b2:16:7b:5a:24:55:b4:bf:1e:83:f2:
         44:79:8b:3a:e2:e7:53:dd:ba:f3:60:b8:ff:ee:93:f6:85:c5:
         67:41:f6:19:59:85:d3:c8:24:d8:3a:3b:64:03:da:18:2c:2b:
         00:ce:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:58 2026 by rpki-client